function receivedMessage(event) {
    alert("DUCK!");
    event.source.postMessage(this.document.getElementsByTagName("body")[0]);
}

window.addEventListener("message", receivedMessage, false);